Move reports attachment url to to param

Previously was getting errors on filenames with characters that weren't
valid in the url. Moving to passing this via param will prevent that.

http://manage.dimagi.com/default.asp?60807