add access token to end of url for url based auth for images