use express mounting, kill connect-cookie-session
Merge pull request #3980 from seanmonstar/express-use

use express mounting, kill connect-cookie-session

After @seanmonstar's updates to fix the requestKey problem, all good.

Selenium tests pass, backend tests pass, front end tests pass.  r+