locking setup.py to lxml 3.3.3