Fix validator for literal "false" (via JSON)
Use the safe_yaml gem for loading untrusted request bodies.