Pin future to new package

In some python installations, future seems to be required by LXML.
Version 0.14.1 has escaping issues, so we pin to a newer version.