Use S3-direct URLs for image resources.

Since we don't currently have valid SSL certs on Akamai, we need to rely
on S3's certs for its own hostnames.

Fixes #6.