now uses express 4.0
updated readme with instructions for express 3.0
disabled x-powered-by
removed check for csrf headers
updated csrf test
Merge pull request #15 from ksmithut/develop

now uses express 4.0