create a new path in the image service to serve the upload page

Deepa and I were playing with the examples and noticed that browser XSS protection was preventing a cross-domain AJAX call in the image example.  We wrote a quick endpoint in the ImageService that serves the upload webpage (lazily), to prevent cross-domain protection problems.