attachments - search by token