Pinned version of sure library

The `sure` library (a dependency of `lettuce`) released a new version on 2/2 that failed on installation with the error message:

    OError: [Errno 2] No such file or directory: '/home/jenkins/edx-venv/build/sure/readme.rst'

This PR pins the version to `1.2.3`, which still works.