Upgrade to express 4.8.5 and cors 2.4.1.

Maybe we can split it down to make it easy to understand.
But yes we need to go that deep now ...