Lock PyJWT version as per #40