Upgrade to express 4.x and add devDependency

Review URL: https://github.com/google/traceur-compiler/pull/1150

Closes #1150.