Pin express to 3.x

Express 4.x was just released, which has some breaking changes.  Pinning our version to 3.x for the time being, until 4 can be properly included in the app.