use cdn for displaying attachments
404 on invalid attachment