bump requests dependency to most recent pre 1.0 version (i.e. most recent version that doesn't change the requests api)