New buckets and those with folders get public read

In order to have widgets list bucket contents, we're adding public read access to buckets.
New buckets will have the proper acl. 
Existing buckets will have their acl changed when users create a folder.