The link is public but protected by a secure token. This extends the activesupport Attachment model to automatically generate a token
