Remove media serving redirect as it's not being used.
Fix bug in media serving controller.

Wasn't 404ing with invalid filename.
Also refactored tests.
Only serve files that have been scanned and found clean