Upgrade to express 4.8.5 and cors 2.4.1.

It is rather complicated now...