Upgrade to express 4.8.5 and cors 2.4.1.

yeah, that's true, since there is no content. I think we should have a look at the client code and if that doesn't impact it change the implementation to be 204.