Dockerfile cleanup

Standardize our installation of pip on a one-liner, and ensure all containers use /app as their working directory.