make content-type configurable
use new express response API
404 handler not needed with *