update dev python requirements
fix scope bug in _load_user