Improved version of express middleware with tests.

Implemented working solution to express middleware that works for
both GET and POST requests.

Updated README with express middleware usage doc.

Completed tests for middleware
I agree with taking these lines out, and just return a "Forbidden"