Access protected image lists via basic authentication, using a personal access token