fix (api/application): add 'id' field, a uuid string to identify the application