set express to 3.5.1 as 4.1.1 seems to now offload many settings to the connect framework, which I didn't want to debug yet. can do that on another branch at some time in the future