fix dep conflict with pytest-cov / coverage

without pinning coverage 4.0a is installed (whereas by default pypi shows
3.7.1). Just let pytest-cov require and pin coverage