Fix swagger; mount REST API at `/api`

This pull requests addresses a bug introduced by recent commits, which caused empty swagger descriptors.

The second commit changes the `app.js` template to mount REST API at `/api`, which is required by strongloop/strong-remoting#24.

/to: @ritch please review