Added the missing dependency to MarkupSafe

It used to be a dependency of pyramid, but not any more, so it should be state explicitly.