fix attachment view to bypass backbone processing

What did apply to the API URL a few days before also applies to viewing attachments: a data-bypass="true" needs to be added to the link pointing to an attachment. then it opens in a new window. Otherwise, an invalid URL to fauxton is constructed that goes nowhere. Test: add an attachment and try to view it