Remove direct dependency to express

/to @bajtos or @ritch 
What is the point of the "or"? `npm install` will always install the latest version, thus `"loopback": "2.x"` will provide the same result while making it more clear what the result is going to be.