Download backup

apiserver/backup: api endpoint for downloading a backup
We don't quite want to do it this way. The checks done below outside this function should be done in here. And the tempDir, mongoPassword, username, address attributes removed off the suite. Same comment applies for the other tests where relevant.