updated package.json, fixed dos issue with server.inject