Only name explicit dependencies, update to latest Flask