first steps towards play-json

This PR adds play-json formats for `AppsResource` and the events api. Subsequent PRs will port more resources to play-json.
i'd switch this to https