bump express-validator

1.0.1 lacks of some fundamental features like .matches