bump requests to v3