Update express.js

Changing allowed default domain.