update body-parser, explicitly use urlencoded middleware