fix thumnail url when using private bucket