Moved to express 4.0

Mostly for future proofing and frankly because the express.Router() is
much nicer, as is the modularization of the middlewares.