SPY-350 Don't let Master remove RUNNING Applications

SPARK-2425 introduce LOADING -> RUNNING ApplicationState transition and prevent Master from removing Application with RUNNING Executors

Is there ever a transient state in which executors are "RUNNING" event though they will immediately fail?  If so, the application could be immortal (not such a big problem for us as the result is the same: restart sparky)