fixed express dep version to 3.4.8