Security fix for YAML being loaded while parsing XML.

Because Merb is using this in line
270 Hash.from_xml(raw_post) of request.rb file to parse request it is unsafe.
This problem may affect all merbs apps out there.