update package.json, fix express bug