Upgrade to express 4.8.5 and cors 2.4.1.

Oh yeah, that's the next steps for sure.

But if no clients are impacted, that's better to state it :)