Explicitly set HTTP cache to public when delivering thumbnail