Pin to a specified version of web2py

Previously we were depending on a static URL on the web2py website, but
this is periodically changed to the latest stable version. We need to be
more careful, esp. since we're patching some web2py files in our
deployments.