Update tutorial.rst

Adds defusedxml as a requirement.
Merge pull request #1060 from mlissner/patch-1

Update tutorial.rst