specify requests < 2.0 (at least for now - we don't know how backwards-incompatible 2.0 will be)