separate express and test against express 4.0.0

- removed core express dependency
- leave route definition to user
- test with express 4.0.0