add tests for ExpenseAttachments controller