add a token to fetch urls requiring image resize/crop to prevent external DDOS via fetch