Update express.js

Seems that favicon handled after session middleware can give problems (http://stackoverflow.com/questions/15290301/why-connect-mongo-creates-new-session-for-every-request)