Use Image library for thumbnails.
Generate thumbnails on image upload.
Update page links.
Basic http auth.
Admin delete button.
Remove global vars.