Skip auth on preview

Eckert needs this for a qa diff tool he's writing. Should be
fine since this is all public information.
Add spec for controller
Merge pull request #540 from G5/remove-preview-auth

Remove Preview Authentication