upgrade express to 4.9.x

upgraded qs to match the version used in express