file attachment for user creation