made package.json more specific with express
lengthened a slow test's timeout slightly