Update requests dep version in req.txt; #26

This works around a problem on GAE with client certificates. We 
don't upgrade to the latest requests because we depend on internals
(see munge_request in http_client.py).