diff --git a/client/components/cards/minicard.jade b/client/components/cards/minicard.jade
index e382e4a1e..4ffcfb485 100644
--- a/client/components/cards/minicard.jade
+++ b/client/components/cards/minicard.jade
@@ -7,7 +7,7 @@ template(name="minicard")
       .handle
         .fa.fa-arrows
     if cover
-      .minicard-cover(style="background-image: url('{{cover.link 'original' '/'}}');")
+      .minicard-cover(style="background-image: url('{{cover.link 'original' '/'}}?dummyReloadAfterSessionEstablished={{sess}}');")
     if labels
       .minicard-labels(class="{{#if hiddenMinicardLabelText}}minicard-labels-no-text{{/if}}")
         each labels
diff --git a/client/components/cards/minicard.js b/client/components/cards/minicard.js
index e1a642ee0..228491fff 100644
--- a/client/components/cards/minicard.js
+++ b/client/components/cards/minicard.js
@@ -116,6 +116,12 @@ Template.minicard.helpers({
       return false;
     }
   },
+  // XXX resolve this nasty hack for https://github.com/veliovgroup/Meteor-Files/issues/763
+  sess() {
+    return Meteor.connection && Meteor.connection._lastSessionId
+      ? Meteor.connection._lastSessionId
+      : null;
+  },
 });
 
 BlazeComponent.extendComponent({
diff --git a/models/attachments.js b/models/attachments.js
index 08360a6e4..614dd3332 100644
--- a/models/attachments.js
+++ b/models/attachments.js
@@ -56,7 +56,7 @@ Attachments = new FilesCollection({
     if (board.isPublic()) {
       return true;
     }
-    return board.hasMember(fileObj.userId);
+    return board.hasMember(this.userId);
   },
 });