update `ez_setup.py` for latest compatible version
bugfix: install_requires uses `pip.req.parse_requirements()`

Build process fixed by using `pip` machinery to parse dependencies
from the `requirements.txt` file.
bugfix: further downgrade CherryPy dependency to <3.4
bugfix: over-escaping entities in Editor attributes

Fixes Mantis issue 781