Send Cache-Control: private and Vary headers in img_auth.php.