removing morgan deprecation warnings

morgan no longer has a default format. Explicitly setting `combined`
to reflect expected behavior.
Merge pull request #256 from krakenjs/morgan-deprecation-warnings

removing morgan deprecation warnings
Update express dependency to include patched qs module.
Merge pull request #263 from krakenjs/v1.0.x-qs-advisory

Update express dependency to include patched qs module.