update express version + todo in readme