split attachment creation into "new" and "save" so ID is returned on creation