Test and document the setup of the collector backend

The collector backend has not been tested. We need to document how to setup such collector as a Tor Hidden Service and configure it to be able to collect reports from clients.

Also some cursory security analysis of it would be great.