Update and pin express==4.10.2 and ejs==1.0.0