Upgrade tastypie.

* Remove hardcoded tastypie directory under vendor-local/lib/python.
* Add tastypie as a submodule.
* Upgrade tastypie to latest release v0.9.15.
* Security fixes in tastypie prevent XSS under /api.