added basic hotlinking prevention
massive bugfix that makes the plugin actually work