ensure that thumbnails are the correct permission (bug 928242)

Should we be using the django storages here?