Update dependencies

Express 4.x has backward incompatible changes so this should be made separately.