Edit the anonymous role and add him the right to content/read for class "image" in the section "media". Don't get why that's not the default config, as that's where it stored by default when you upload a new image.
X+
P.S. ...chocolate fountain...sounds like a dream...
