test: Use ephemeral ports for test apps

Using hard-coded ports is geneally not compatible with CI.

LoopBack appears to use a coercive check for port values in app.json
and using a string "0" seems to get by the check. Logged as
strongloop/loopback#188.