Get the thumbnail url properly from the storage, instead of using s&r

This fixes an issue with storage backends that have other file-specific
attributes in the url, such as S3's signatures.