update express

Updating the express version fixes a `TypeError: Arguments to path.join must be strings` error for me, which I believe originates from a regression in earliers express versions.