Make sure all public facing controllers are PublicFacingControllers

https://www.pivotaltracker.com/story/show/61651246

- html_attachments
- attachments (via public_uploads)
- public_uploads
- placeholder