Use app.get('env') instead of var
Remove X-Powered-By header