Upgrade to express 4.x and add devDependency