use bower.json
update express.js to 4.9.0