updated express dep to ~3