Move stylesheets to public root

This gives us compatibility with redirector and means that the redirector's smokey tests can run against Bouncer without modification.