Prevent query string auth if not using a CDN.