FS#2767, fix for missing security token

Include the security token when image resize parameters are passed to ml() by string (e.g. 'w=80').

Also adds tests for same.