Mount REST API at `/api`

This change allows the Loopback REST adapter to own it's URL space
and consistently report 404 errors.

Additional benefits:
 - It should be easier to implement API versioning - different API
   versions can live at different sub-paths like '/api-v1'.
 - Application routes and static content will not clash with the URLs
   handled by the REST API.