/media requests don't require SSO authentication

The /media route will be accessible publicly, so make sure that users
aren't asked for SSO authentication otherwise they won't be provided
with any assets.
Consolidate BSON/Mongoid rescue_from uses to application controller