Make sure all public facing controllers are PublicFacingControllers

- html_attachments
- placeholder

Excluding the file attachments controllers for now.