package.json with express dependency