Bump express-state dependnecy to at least v1.0.1

This updates `express-state` the latest version and requires that _at least v1.0.1_ is used.