Upgrade express

This is to fix a security alert with some of express' dependencies.

- Upgrade express to 3.17.5
- Fix express deprecation warnings after upgrade (ignoring connect ones for now)
- Remove unused dependencies/cleaned up test/dev dependencies

Fixes #638