add pinning for setuptools