test: prevent image hotlinking - OK