Update dependencies

Express 4.8.0 fixes a qs vuln.