API: Fully-qualified URLs and thumbnails for scans

More API work. Biggest changes: fully-qualified URLs and scan thumbnails