- don't login or provide authorization token for public videos (unless
denied access)
- add thumbnail previews