Explicitly call out Express 3.0 dependency in package.json