bringing package.json inline with upstream; correctly using morgan