...in chrome, however, the source of the image looks like this
src="data:image/png;base64,iVBORw0KG..<loads more like this>"
and it works without the token, where as in IE it is a proper path to the image (like your example src="https://[server name]/ArcGIS/rest/services/Org/Basemap/MapServer/4/images/714F5E24").
What's going on here then?