express 4.9.7 has a bad checksum