Chrome has a known issue where `Vary: Origin` is not respected by its in-memory cache w/r/t CORS. By requesting the original image with `crossorigin="anonymous"` set, we provide `Origin` during this request, which gets the appropriate CORS response set in the cache.