TODO

missing tests:

stream: check header
- correct end (-1)
- correct length
- correct mime-type
stream: correct status code
- return partial content only for large files
stream: max request size
refresh: database-inserts