Use `express` 3.x for backwards-compat

It looks like 4.x doesn’t work with Node.js 0.8.x.