450 create clone api endpoint

closes #450
We could use a CloneXFormSerializer to validate posted data, the clone functionality could be added in the serializer's save method.