update to express 4 and clean up package.json