wrap app in app folder

/app/node_modules is dedicated to client/server shared modules thus
avoid client having access to server modules like logger.js
/node_modules is dedicated to global modules