require flask<=0.9

temporarily fixes https://github.com/jfinkels/flask-restless/issues/218
allow disabling deep results per-request

originally by @johaness
allow fine grained control of relations included in output
bump to 1.current-upstream-version