track user actions of attachment
track login & logout