Upgrade to express 4.8.5 and cors 2.4.1.

Maybe could we leverage [layer.map](https://github.com/strongloop/express/blob/master/lib/router/layer.js#L91)?