express npm validation