Workaround security patched Rails 3.0 XML bug

Rails 3.0 serializes a nil value as <value type="yaml" nil="true"/>
but the security patch raises when it encounters type=yaml. Basically,
Rails 3.0 is badly broken.