don't pin devpi version
update version and user in base.cfg