use a custom Werkzeug converter for commit SHAs; fixes #1

Fixes #1.
Relevant docs: http://werkzeug.pocoo.org/docs/routing/