fix dependencies

Incompatible with Express 4, stuck to Express 3.4