Make py-dom-xpath an external dep

Update pip to avoid "unknown option: --unverified"