pull only images out of posts automatically (closes #2)
updated deprecated security level, fixes #9