setup.py: use latest version of requests

Also, use flexible version matching instead of strict. This way if
requests is already installed (and is at least version 1.2.3), use it
instead of the older version.
prep for v0.4