fix: update express to avoid body-parser vuln.

fix: update express to avoid body-parser vuln. #681