Move app specific classes into app package to distinguish from framework

- the core package contians core services

- the api package contains exposed rest apis

Also experiment with spray routing exception and status code handling
in preparation for tighting down error responses