explicitly state the need for npm update for express 3