update permissions to manage attachments

- update permissions to manage attachments in ability model
- update the photos view to display saves attachments
- Fix error in attachments controller build method
- add validations to attachments model