Fix #3: Support Express 3

- Using new `req.secure` and remove `isHttp` config option
- Replace `res.helpers()` with `res.locals`