move api commands to /api/*
reorganize handlers
move api routes
some cleanup around new test creation
refactor bandits to use mongoengine, show users their running tests