express is now the only dependency.
bump version of dev deps.