Download backup

apiserver/backup: api endpoint for downloading a backup
The last Check should be an Assert