Move to ExpressJs 4.x

Again, does what it says on the tin. Based on floatdrop's earlier work, adapted for 4.x.
It's in line with the [Node API docs](http://nodejs.org/api/all.html#all_class_https_server). The constructor checks for the old setting, so it should be fine anyways.