Attachments with `&` in the file name can't be downloaded

When saving attachments if the filename for the attachment has an `&` in it, the attachment will not be able to be retrieved from Xero.

Workaround: modify the filename prior to uploading so that all ampersand characters are removed.