Deps updates (#1420)

Started w/ just an express update but then ended up with a full "npm
update"

- **deps: bump express to 4.21.2**
- **deps: update all deps via `npm update`**