fixes #1198: bump express for security

Author: shellscape

package-lock.json

@@ -49,7 +49,7 @@
     "connect-history-api-fallback": "^1.3.0",
     "debug": "^3.1.0",
     "del": "^3.0.0",
-    "express": "^4.13.3",
+    "express": "^4.16.2",
     "html-entities": "^1.2.0",
     "http-proxy-middleware": "~0.17.4",
     "import-local": "^0.1.1",