api.upload do api.token @attachment.token end