updated to clojure 1.5.1 and fixed the read-string vulnerability using edn.