Add Vary: X-Forwarded-Proto to the thumb.php redirect