update pillow to 2.4.0

"Fix insecure use of tempfile.mktemp (CVE-2014-1932 CVE-2014-1933)"