minor bug fixes

insecure image request, FOUC when loading an image in the zoom preview