Upgrade express to close security vulnerabilities

Related issue: https://github.com/balderdashy/sails/issues/2070

Just let me know if this change should be made in `stable` instead of `master`.