Add an OkJson backend and remove the YAML backend

Fixes CVE-2013-0333.  The ActiveSupport::JSON::Backends::Yaml class is present but the functionality has been removed entirely.
bumping version
Fix escape_once not escaping single quotes. Fix it double-escaping hex-encoded entities, like &#x27, which was recently added to ERB::Util.