bump libyaml to 0.1.5 for CVE-2013-6393
recompile psych if it's compiled with 0.1.4
Merge pull request #224 from heroku/libyaml

compile psych with libyaml 0.1.5