Now fetching all pip source from LLNL to avoid https issues, new dependencies that we missed: marupsafe, updated spyder to 2.2.5