add express & ejs to dependencies