logged in before test in attachments_controller_spec