Add nil checks in thumbnail code

[mjh1]

We saw a case in prod where this target URL was still nil. Should have had nil checks from the start anyway to avoid any panics.