Prevent image access without login.