Upgrade to express 4.8.5 and cors 2.4.1.

I think the best way to do so is to propose the change on the loop-dev list and see if there is an issue. We should probably also ask @ferjm about it.