Do you have cookie support disabled in your browser?
The session id is stored in a cookie, which gets validated if you want to access the image files. So not authenticated users can not get access to your images.
Disabling Cookie Support would lead to that issue.