migrate express 3.x to 4.x, adjust some dependencies