added authentication for admin and thumbnail image loading issue fixed