Download backup

apiserver/backup: api endpoint for downloading a backup
Well, it's testing that authentication requires a user - hence the name and creating a machine. You can see that TesstRequiresAuth fails (because there's no user), and this test does a lot of extra work to create the user so that it *doesn't* fail with "unauthorized". (Strictly TestRequiresAuth is unneeded as this test does that *as well*.)