Basic image serving works
Added access control header