fixed express dependency to ~3