move webob from test-requirements to requirements

Not only do tests depend on webob, but the ec2_token middleware itself
depends on webob directly.

Change-Id: I3f84cfb274eaf50980aa0013bf29bec3ff21c83d