fixing favicon forwarding, thumb sizing and cors for offsite images