Packaging: requests 1.0.0 not supported

requests 1.0.0 removes `requests.defaults`, which breaks `neo.api`.

I don't know offhand what the best requests 1.0+ way is to globally enable `safe_mode` by default, so this branch just depends on `requests<1`, for now.