Pin dotenv

1.0 doesn't support using a .env.development file so pinning this for now.