specified exact 'express' dependency in package.json