Allow logged out viewing of public images. Change image endpoint to use query strings.