Make the image proxy a little stricter
- Only allow certain content types and require auth.

Fixes #643
Fixes #642
Use POST for unlinking and styling the unlink button
Fix formatting and string comparison
Missed some spacing
Redo some changes that were dropped.
Working unlinking.