Explicitly skip authentication in MediaController

Makes it more explicit that authentication is not required for this
controller.  Also makes it less likely that future controllers will be
added without authentication by mistake.