dont require login for forum attachments