pin all requirements version, fixes prymitive/upaas#21