Depend on extracted serialize-javascript package

The internal lib/serialize.js module is now published as its own package — serialize-javascript. This change make express-state now depend on it.