Updated app.js

added morgan as a module dependency and removed express in line 20 because the logger ships separately now.