added an access control header to allow other servers to source images from this one