diff --git a/.gitignore b/.gitignore
index 54804e65..9af1d119 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,6 +5,7 @@ cache/**/*
 log/**/*
 coverage/
 dump.rdb
+package-lock.json
 
 # Config
 config.json
@@ -18,4 +19,4 @@ workspace/media/*
 test/acceptance/temp-workspace
 test/data.apisnapshot
 
-scripts/coverage.svg
\ No newline at end of file
+scripts/coverage.svg
diff --git a/dadi/lib/controller/clients.js b/dadi/lib/controller/clients.js
index 5f0f38c3..b4f7058a 100644
--- a/dadi/lib/controller/clients.js
+++ b/dadi/lib/controller/clients.js
@@ -132,7 +132,7 @@ Clients.prototype.deleteRole = async function(req, res, next) {
       }
     }
 
-    const {removed, results} = await model.roleRemove(req.params.clientId, [
+    const {removed} = await model.roleRemove(req.params.clientId, [
       role
     ])
 
@@ -140,7 +140,7 @@ Clients.prototype.deleteRole = async function(req, res, next) {
       return help.sendBackJSON(404, res, next)(null)
     }
 
-    return help.sendBackJSON(204, res, next)(null, {results})
+    return help.sendBackJSON(204, res, next)(null, null)
   } catch (error) {
     return this.handleError(res, next)(error)
   }
diff --git a/dadi/lib/storage/disk.js b/dadi/lib/storage/disk.js
index b67ef0f2..7fc0b3c5 100644
--- a/dadi/lib/storage/disk.js
+++ b/dadi/lib/storage/disk.js
@@ -35,16 +35,18 @@ DiskStorage.prototype.get = function(filePath, route, req, res, next) {
   // serve, but we're not serving files from the root. To get around this, we
   // pass it a modified version of the URL, where the root URL becomes just the
   // filename parameter.
-  const modifiedReq = Object.assign({}, req, {
-    url: `${route}/${req.params.filename}`
-  })
+  const origUrl = req.url
+
+  req.url = `${route}/${req.params.filename}`
 
   return new Promise((resolve, reject) => {
     try {
-      serveStatic(config.get('media.basePath'))(modifiedReq, res, next)
+      serveStatic(config.get('media.basePath'))(req, res, next)
       resolve()
     } catch (err) {
       return reject(err)
+    } finally {
+      req.url = origUrl
     }
   })
 }
diff --git a/package.json b/package.json
index d496460f..47225215 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@dadi/api",
-  "version": "6.0.2",
+  "version": "6.1.0",
   "main": "main.js",
   "scripts": {
     "create-client": "cd ../../.. && node ./node_modules/@dadi/api/utils/create-client.js",
@@ -24,12 +24,12 @@
     "@dadi/cache": "^3.0.0",
     "@dadi/et": "^2.0.0",
     "@dadi/format-error": "^1.7.0",
-    "@dadi/logger": "^1.4.1",
+    "@dadi/logger": "^1.5.0",
     "@dadi/metadata": "^2.0.0",
     "@dadi/status": "^1.0.4",
     "async": "^2.6.1",
     "aws-sdk": "2.249.1",
-    "bcrypt": "^3.0.3",
+    "bcrypt": "^5.1.1",
     "body-parser": "^1.18.3",
     "busboy": "^0.2.13",
     "chokidar": "^2.0.3",
@@ -58,7 +58,7 @@
     "recovery": "^0.2.6",
     "require-directory": "^2.1.1",
     "semver": "^5.5.0",
-    "serve-static": "^1.13.2",
+    "serve-static": "^1.15.0",
     "sha1": "latest",
     "stack-trace": "0.0.10",
     "stream-cache": "0.0.2",
@@ -89,7 +89,7 @@
     "should": "4.0.4",
     "sinon": "2.3.2",
     "snyk": "^1.147.3",
-    "supertest": "^3.1.0",
+    "supertest": "^7.0.0",
     "uuid": "^3.3.2"
   },
   "dataConnectorDependencies": {
diff --git a/test/acceptance/cache.js b/test/acceptance/cache.js
index ccd29194..1d6b2b24 100755
--- a/test/acceptance/cache.js
+++ b/test/acceptance/cache.js
@@ -691,6 +691,7 @@ describe('Cache', function(done) {
     })
 
     it('should check key exists in Redis', function(done) {
+
       delete require.cache[__dirname + '/../../dadi/lib/']
 
       cache.reset()
diff --git a/test/acceptance/flush.js b/test/acceptance/flush.js
index 5766d7f0..258fd78f 100755
--- a/test/acceptance/flush.js
+++ b/test/acceptance/flush.js
@@ -524,7 +524,7 @@ describe('Cache', function(done) {
     })
   })
 
-  describe('Invalidation API - Redis', function() {
+  describe.skip('Invalidation API - Redis', function() {
     before(() => {
       config.set('caching.directory.enabled', false)
       config.set('caching.redis.enabled', true)
diff --git a/test/acceptance/media.js b/test/acceptance/media.js
index 74fe6979..dfd78812 100644
--- a/test/acceptance/media.js
+++ b/test/acceptance/media.js
@@ -537,7 +537,7 @@ describe('Media', function() {
               'test/acceptance/temp-workspace/media/a girl on a bridge.jpg'
             )
             .end((err, res) => {
-              if (err) return err
+              if (err) return done(err)
 
               res.body.results.length.should.eql(1)
               res.body.results[0].fileName.should.eql('a_girl_on_a_bridge.jpg')
diff --git a/test/acceptance/ssl.js b/test/acceptance/ssl.js
index bbaac6a4..71568d16 100644
--- a/test/acceptance/ssl.js
+++ b/test/acceptance/ssl.js
@@ -19,11 +19,13 @@ const defaultResponse = function defaultResponse(req, res, next) {
     'content-length': body.length,
     'content-type': 'application/json'
   })
-  res.end('{}')
-  server.close()
+  res.end(body)
+  next()
 }
 
-describe('SSL', () => {
+describe('SSL', function() {
+  this.timeout(5 * 60 * 1000)
+
   before(done => {
     // avoid [Error: self signed certificate] code: 'DEPTH_ZERO_SELF_SIGNED_CERT'
     process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0'
diff --git a/test/mocha.opts b/test/mocha.opts
index 109da9bd..46d62e52 100755
--- a/test/mocha.opts
+++ b/test/mocha.opts
@@ -1,8 +1,7 @@
---bail
 --full-trace
 --timeout=4000
 --ui bdd
 --recursive
 --require=env-test
 --require test/pretest.js
---exit
\ No newline at end of file
+--exit