Don't require a specific npm version

As cors is not using the npm api directly and npm v2.0.0 was just released, I think its better to drop the npm requirement.