Bump express and express-hbs to latest versions

closes #875, issue #876, issue #830