Move HTML attachment rendering to own controller

It was a bit weird that it was mixed up in the normal attachments
controller.