fit scrollbar into 5-col pick_image
allow serving javascripts without auth