Upgrades bottle to fix security hole. Bumps to 0.5.4.