Update express configuration / tests configuration so that they prevent the X-Powered-By header from being set in the first place, instead of removing it