make sure attachment filename doesn't hold any special chars