Don't pin the specific version of restframework

@wedaly I'm trying to resolve a dependency conflict in edx-val, tracking down instances of rest-framework that can be safely upgraded past 2.3.5