pin down express@3 with backward compat semver range

closes #49
0.6.7