dependencies are duplicated in setup.py and requirements.txt. Also, should add version specs to all deps