(pouchdb/pouchdb#2573) - lock express to 4.6.1

This solves the issue.