Handle malformed array params in public-facing PublicationsController

See: bb2ea841eaf7f9ccea40a33855b71dbb4c3603bf for more detail as that's where the fix came from.