Use express's built in static middleware to serve static files

It is a bit safer to let express handle the static files. I also moved the static files into their own directory to keep anyone from requesting any other files.