604 add xls export to data endpoint

closes #604
But `xform.xml` does not return the data stored in the form, it returns the `XForm` itself as XML. This also needs a test.