added new deap source url + checksum

also removed matplotlib (again?) since it does not build without freetype.