simple expressjs app get around ownership of urls