Add more informative message when core API token doesn't match
Use ng-src to prevent an invalid image URL being loaded