update readme to use express trust proxy option over cookie's secureProxy
replace connect with express4 as a dev dependency