Remove automatic enablement of application and core modules

This PR makes it so the application module and core module must be explicitly enabled in bootstrap.php alongside other modules. This gives the user total control and flexibility when enabling modules.
doesn't this PR make it possible to dump `$_paths` completely and always refer to `$_modules`?