Add an option to pass --allow-external and --allow-unverified to pip

This makes it possible to use non-PyPI dependencies
Correctly handle VCS links in dependency_links

Current version of setuptools supports VCS URLs in dependency links and
can pull packages from specified repos.  Pass such links directly to
pip, and NOT as an implied http index URL.