http: allow ACL with HTSP streaming to fetch icons from imagecache via HTTP, fixes #2529