Liferay 7.0 requires a token to the portrait URL