Depend on extracted serialize-javascript package

The internal lib/serialize.js module is now published as its own package — serialize-javascript. This change make express-state now depend on it.

See: https://github.com/yahoo/serialize-javascript