dep: serve-static@1.0.4

fixes #332