explicitly pin our requirements

travis would otherwise try (and fail) to run with an older version
of pytest