(pouchdb/pouchdb#2537) - lock express to 4.6.1