package.json: update express

Last versions of express avoid a bug