added constraint on requests lib version
making versions explicit for all reqs