Use ephemeral ports for test apps

Using hard-coded ports is generally not compatible with CI.

LoopBack appears to use a coercive check for port values in app.json
and using a string "0" seems to get by the check. Reported in
strongloop/loopback#188

@sam-github, please review