[dist] the author pulled safe_yaml 0.9.4 from rubygems

so to continue using travis, we need to rely on 0.9.5, I already
complained at https://github.com/dtao/safe_yaml/issues/43
[api] fix decline of add_role, set_bugowner and delete requests when permissions are just defined in package, but not project (bnc#833616).
[webui][api] Introduce comments for projects, package and requests in the API and display them in the UI
[webui] Comments now expand and collapse
[api] Testing and validation for comments
[api][webui] ran migrations and fixed routes for comments in request
[webui] removed package file count. Was a test and now unnecessary
[webui][api] implemented feedback received on PR about exception handling, AR calls and other tid-bits
[webui] refactored child comment reply links & display
[webui][api] refactoring to make the code more object oriented
[webui][api] Refactoring. GET and POST now working via JSON. Object oriented code now in place too.
[api][webui] GET request for project/package/request now being made from the controller itself
[webui][api] DRYed up [webui] and fixed a bug in [api] for request
[webui][api] Added error handling and DRYed up code.