express is a package.json requirement - how hasn't this been an issue before