heroku fix: moved express into dependencies