how to allow attachments to a form?