updated dependencies, using express 4