12-prepare-for-production: Order of steps

I suggest switching the order of the following steps:
```js
// disable powered by express header

// set port number
```
Setting the port number first will allow FACers to first run the app and see the powered by express header, before disabling it.

Happy to do this myself.