split dev and production requirements

also remove lxml as we'll use site packages. compiling lxml is annoying.