replace express with dependency-free router

I don't want to be the type to hand off a module with a needless dependency on express, so I factored it out in this branch. Thanks to supertest, I didn't have to modify the test suite. Yay!

cc @JackCA @jclem