Move to ExpressJs 4.x

Again, does what it says on the tin. Based on floatdrop's earlier work, adapted for 4.x.
I'd probably run a `s/    /  /g` on the whole thing :(. Strong preference for 2 v. 4 spaces, though admittedly we don't have a linter in place.