temp fix for `npm start`

fixes express broken `latest` dependency so the app still starts