migrate to express 4.x (tests not included)