pulls express-validator from npm instead of github