set explicit version (2.4.2) for 'cors' (node middleware)