update dependency versions
refactor with express 4 only in mind