added accessThumbnail to $actions
switched to the new readThumbnail action
WIP: check for readThumbnail permissions

currently not working… always returns false… investigating why