Don't expose the root directory through express