Fix deprecated argument order in res.json().

Express logs a deprecation warning when using `resp.json(obj, status)` so this fixes things to use the preferred `resp.json(status. obj)`.  @fmarier r?