Move the package.json to the top level.
Add package.json back after moving it, but add as a soft link.

I'm not sure on the reasons why it was buried in web-app dir, so put it
back there for whomever was using it.