Pin requirements (#13)

This will generate a merge conflict with #14 in `requirements.txt`, but it will be easy to fix.