Upgrade Express to v4.9, add Morgan for logging