move `connect.query()` into our repo
use local copy of parseUrl
remove last pieces of connect dependency

- copy over patch.js to shim ServerResponse
- bundle `static` middleware
remove ServerResonse.headerSent monkey patch

node.js ServerResponse contains a headersSent field. Use that instead of
our patched misnamed version.
remove support for node 0.8
move support for multiple `res.cookie` calls to lib/response

Patch.js is simpler and follows upstream node.js closer as a result.
bump cookie parser dependency to 1.0.1