The user is prompted to download and save an attachment, rather than view it in the browser.

Cleaned out routes.rb
Registered MS Word mime type.
Don't ask for credentials during tests.
Respond with files of appropriate types, force browser to prompt the user to save the attachment.
Serve a 404 if the attachment is not available.