SECURITY: do not follow redirect by default when downloading hotlinked images