pin version for requests_oauthlib to 0.3.3