expose connect.middleware using Object.getOwnPropertyDescriptor()

closes #1853. no tests, but it should be fine.
bump connect, mocha, and should
3.4.7
throw 400 in case of malformed paths