Thumb api, image search, helper

Thumb API now accepts paths prefixed with allowed directories