added comment, clarification about the removal of the token param from the attachment URL