Fix an issue that enables user agents to access images without using a valid access token if the server has been configured with white- and/or blacklists for the access token event listener. Fixes #258
Merge pull request #258 from christeredvartsen/issue-258

In special cases, access tokens can be bypassed