disable dynamic scripting

see http://bouk.co/blog/elasticsearch-rce/