Bump express and mongoose versions