Update image.php

redirect to login when viewer is not authorized.