Update changelog.
Switch to use JSON as default serializer.

Pickle is unsecure, and YAML is no better. We already serialized all
data passed between Celery and app in a way that is serializable by
JSON anyway, so let's use JSON.