Fixed permission builder for attachments.
Generate correct form token on attachments.
More versalite token for drafted attachments.
Keep attachment in sync to posts operations