Update to Serrano 2.1.3 to fix follow-up CORS issue