Clean up dependencies in app.js

[Shurlow]

Neither static-favicon, cookie-parser, or body-parser are listed in npm config.

We def don't need static-favicon or cookie-parser
I think we still need body-parser right?