GUI-1088
fixed call for image json from image_picker to be POST w/ csrf