ENYO-2935, ENYO-3061: update express to avoid DoS & 100% CPU

- See https://github.com/senchalabs/connect/issues/898
- update `npm-shrinkwrap.json` accordingly

Enyo-DCO-1.1-Signed-off-by: Francois-Xavier KOWALSKI <francois-xavier.kowalski@hp.com>