Move upload and download actions into their own attachment controller