special image serving route, prefer path.join to string concatenation