Update Pillow due to a security alert

This is due to CVE-2014-3589 (a denial of service attack).