create app model

to squash
setup controller
REST versioning
Setup auth
Permit params