This is in the log from the QA server when trying to run this:

`[2013-10-07T18:45:53.347Z]  WARN: oae-server/3025 on qa1: CSRF validation failed: attempted to execute unsafe operation from untrusted origin. (method=POST, host=oae.oae-qa1.oaeproject.org, targetPath=/api/mediacore/thumbs)`