add attachment upload functionality