implemented download photo, partially implemented download photos (TODO statements for undone part), and cleaned up routes/api/groups.js a bit