package.json, dev dependencies downgrade morgan to 1.0.0