Updating express and qs deps

See https://nodesecurity.io/advisories/qs_dos_extended_event_loop_blocking and https://nodesecurity.io/advisories/qs_dos_memory_exhaustion
0.7.8
Removed express as dev dependency