change dev dependency to express 2.x