A couple outdated modules

### Steps to reproduce

``` sh
$ # sudo npm i nsp -g

$ npm shrinkwrap --dev
wrote npm-shrinkwrap.json

$ nsp audit-shrinkwrap
Name Installed Patched Vulnerable Dependency
syntax-error 0.0.1 >= 1.1.1 react-async > connect-browserify > browserify
qs 0.6.6 >= 1.x react-async > express > connect
qs 0.6.6 >= 1.x react-async > express > connect
qs 0.6.6 >= 1.x react-async > phantomjs > request
qs 0.6.6 >= 1.x react-async > phantomjs > request

$ npm outdated --depth 0 | sort
Package Current Wanted Latest Location
browserify 3.46.1 3.46.1 5.10.0 browserify
connect-browserify 1.0.0 1.0.0 3.2.0 connect-browserify
express 3.4.8 3.4.8 4.8.3 express
jshint 2.4.4 2.4.4 2.5.3 jshint
mocha 1.17.1 1.17.1 1.21.4 mocha
mochify 0.11.3 0.11.3 1.0.2 mochify
node-dev 2.1.6 2.1.6 2.3.0 node-dev
semver 2.2.1 2.2.1 3.0.1 semver
```

If you don't want to update to Express 4, you can still use [**express@3.16.0**](https://github.com/strongloop/express/releases) which should be patched.

**phantomjs** should be patched, as of Medium/phantomjs#211

**browserify** should be pached as of [**browserify@4.2.1**](https://github.com/substack/node-browserify/blob/master/changelog.markdown#421) (latest is [5.10.0](https://github.com/substack/node-browserify/releases))