freeze dependency versions
Update to devpi-server 2.0.4
specify explicit version of "devpi" meta package
requests 2.4.0 was released