* express/cors/gzippo are not dev-dependencies, they really are dependencies