Correctly scope controllers
Avoid the Api vs API problem with autoload

See:
  https://coderwall.com/p/vaw85a
Move routes under the engine and auto-mount at /
Scope controllers under the Dradis:: namespace
README - include some curl testing information
For the time being we don't support token-based auth