Introduce proxy to show images in the sms frontend on cors restricted servers

This MR is a possible way to address the problem in #161 (closed) by working via a proxy that does the requests on the backend & deliver the results back via the API.

It is an approach that has some security concerns. By adding a blocklist variable I tried to reduce those risks for unexpected accesses.