Upgrade the backend deps

* This removes all known current deprecated deps found in express 3
* *body-parser* offers some native limits for form bodies sent... so mirroring that to transfer size upload limit
* Using some package defaults to eliminate 3 new deprecation messages
* Update README.md to reflect

Since *morgan* is the *express* endorsed request logger this closes #394 ... reopen if we need another/different one or to configure a written log.