Serving images to authorised users only - Cross domain not working

Question

I developed a system where users can upload images to their account. And it was inside public directory. As an example we could access it if you can guess the url. I am usin