Disallow requests 2.4.0 in requirements. fixes #2690, #2684