throw an error if unknown properties are put on the request or response objects.

fixes #2
add support for res.locals in the response object.