play 1.2.6

Updated play to 1.2.6 which is a critical security update.

Closes #185.

Signed-off-by: Jack Nagel <jacknagel@gmail.com>