Explicitly skip authentication in MediaController

Makes it more explicit that authentication is not required for this
controller.  Also makes it less likely that future controllers will be
added without authentication by mistake.
Merge pull request #7 from alphagov/explicit_authentication_skip

Explicitly skip authentication in MediaController