Remove bounds on pbr, update dependency on hacking

This is necessary to get devstack running

Change-Id: I5746017ac321f123f8d8f34a2b2d1d2649d44839