Require tornado < 4.0 (compatibility breaking changes in major release)

Tornado 4.0 was recently released and is the default version on PyPI. There are backwards-incompatible changes that break tests and possibly worse in the core codebase. Ensure tornado < 4.0 in setup.py for now.