update versions, specifically express 4