[refactor] upgrade to express 3.x