Bump express for __proto__ fixes

Remove extraneous qs dependency, too.
Merge pull request #28 from strongloop/feature/dep-upgrades

Bump express for __proto__ fixes, remove qs.