Stricter dependencies on Pillow

Version 2.4.0 is broken, so let's avoid it.

Signed-off-by: Michal Čihař <michal@cihar.com>