Update lxml to the latest version to get a security update

This isn't a risk for Pombola, but Gemnasium has been warning
about it.