depend on express 3.4

express 4.x isn't compatible