Pin repoze.who-testutil to 1.0.0
Add `cd ..` to docs to avoid confusion