express plugin now functional

need to refactor ExpressPlugin.pathAllowed a little bit.