A sample app to show the express bodyParser exploit and a possible fix