Thumbnails fail to load on private instances

When logged into a private instance, post thumbnails don't load. This is because Lemmy will reject all requests that aren't authenticated when the instance is set to private (thumbnails load after setting the instance back to public) and it seems to expect the HTTP call to contain the JWT in the cookies.