Use 'X-Object-Public' to mark files as public. Then they can be accessed via the /public URL without authentication.

Refs #595