Upgrade to express@4 for security reasons
1.12.0