revamped api

- express is now a depedency (you no longer pass in an express app)
- middleware signature changed
- goa() signature changed