pin all requirements version, fixes #21