use ajax to grab the img data since we need to auth