Bump Dragonfly for security

More info:
https://groups.google.com/forum/?fromgroups=#!topic/refinery-cms/IJ-g7VSl93Q
https://groups.google.com/forum/?fromgroups=#!topic/dragonfly-users/3c3WIU3VQTo

Maybe backport to 2.0 and 1.0 stables and release new versions?