fixed bug in assets_controller that caused only full size assets to get sent (when the asset was private)