Specify abstract deps in setup.py, concrete in requirements.txt

Read this: <https://caremad.io/blog/setup-vs-requirement/>, makes sense.