add cache-control: public to the login page so that firefox would bother making a thumbnail