refactor url middleware

- replace `root` and `path` module groups with `shifter`
- req.comboSecure => req.secure
refactor decode middleware

- sync api
- default pathogen decoder
jslint <3
use pretest script
remove mocha dependency
remove handlebars dependency
remove mention of application-specific middleware
bump version to 1.0.0