fix package.json with express 3 version