Pin Python package to the versions specified in Pombola

This is largely to get the tests passing on Travis again, which is now
installing later versions of these packages than the code expects.  In
practice, this code will always be run with the versions specified in
Pombola anyway, so specify this explictly.