Bug fixes, including incorrect lost password link, tokens on image upload, and image routing.