fixed package.json and upgrade to express 4