Update package.json

Consider porting it to express 4.0 

Now stick with express 3.x