Upgrade i18n to get fix for CVE-2013-4492.
Set enforce_available_locales to false

This was the previous behaviour. Setting it explicitly avoids a
deprecation warning.
Apply monkey patch for CVE-2013-6414.
Merge remote-tracking branch 'mysociety/master' into production