Don't make the public directory writable by default any more.

I'm not entirely sure why this was originally needed, but I don't think
it should be the default any more.
Unify the web server user to a common variable across nginx and apache.
Use ACLs to make the writable directory permissions more granular.

This removes the need to have world writable files on the server.