Open fully public controllers

[solebared]

Why

As we consolidate our authorization solution, there are a handful of controllers that are fully public and don't need authentication or authorization. This is codified in PublicController

Pre-Merge Checklist

• All new features have been described in the pull request
• Security & accessibility have been considered
• High quality tests have been added, or an explanation has been given why the features cannot be tested
• New features have been documented, and the code is understandable and well commented
• All outstanding questions and concerns have been resolved
• Any next steps that seem like good ideas have been created as issues for future discussion & implementation

Next Steps

See #840.

And once we're done with this push, it could be useful to review where we've landed with:

• Authorization concern
• ApplicationController
• AdminController
• PublicController

Outstanding Questions, Concerns and Other Notes

?