package.json updated
moar
no package version for express. use *

it's API is stable enough for that,
and i'm only using a subset