Make sure all public facing controllers are PublicFacingControllers

https://www.pivotaltracker.com/story/show/61651246

- html_attachments
- placeholder

Skipping the file attachment controllers for now.