Remove `X-Powered-By` header

Must be set to `null` to remove otherwise Express will set it.
Fix `this.next` erroring

See https://github.com/jaredhanson/locomotive/issues/90
Clean up exposed profile variables