move app out of webroot to top level