Update Express

Update Express to the latest 3.x version due to this http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7191

This should suffice until Express is fully removed.