add some tests for ml()
ensure security token is included in media url when resize parameter is passed in string form, e.g. 'w=80'
Merge pull request #218 from splitbrain/FS#2767

FS#2767, fix for missing security token