fix(api): fix undefined password

[chamburr]

This fixes an undefined error found in logs when visiting an image route where the image does not exist.

I also wanted to ask if console.log(image) on line 67 is intended, or possibly left behind from some debugging?

[diced]

Was fixed a long time ago, forgot to close