Download backup

apiserver/backup: api endpoint for downloading a backup
This doesn't impact the open file we're returning, right?