SECURITY: Fix accidental public CC headers in img_auth.php