update to express ~4.2.0

fixes #26