Add (switch to?) `tools.reader.edn` for reader implementation

[ptaoussanis]

Apparently read-string is vulnerable to security problems even when :read-eval is false: https://groups.google.com/forum/#!topic/clojure/YBkUaIaRaow