update express dep
fix docs
update oauth2orize version