clean up hapi api

[jackhftang]

The way to handle requests is inspired by deployd. Although it work well, it is still experimental. Some points to note:

1. there are overlapping use of http and websocket. In theory, websocket can replace http request entirely, but I still want to use hapi validate and authentication feature which for http only. Meanwhile, I want to have bidirectional communication.
2. I do not care the philosophy behind restful api. IMHO, restful api is limiting and it would be easier and write less code if ignoring it.