requirements: pin lxml version for py27

lxml 4.4.0 breaks OrderedDict attributes in py27 so we pin to previous version
https://bugs.launchpad.net/lxml/+bug/1838252
1 file changed