package.json: remove qs dependency

doesn't seem to be used anywhere in Express. it is, however, used in Connect.