compile psych with libyaml 0.1.5

This fixes [CVE-2013-6393](http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737076).