pulled out password to application.yml, made thumbnails shrink to size