Upgrade to lastest Aspen and PyMongo

This also updates the requirements.txt file, which got ahead of the
actual deps in vendor, per #12.