use express 3.x since 4.x doesn't work