some styling
refactor sign_url into attachment controller