Extlib security patch

There is a problem with XML type request to merb that contain YAML. It is fixed in new version of extlib.