package.json: updates

* `connect` was changed to suit us
* no use of `step` library