update to Express 4 and eliminate peer dependencies