moving --allow-external pydot and --allow-unverified pydot into requirements.txt