raise 404 if attachment missing