fix missing express dep