move license out of readme into standard file

also list it in package.json