Looks like a buggy pip version could be the root cause, but
nevertheless, we shouldn't need to specify that we're depending on
requests explicitly when requests_oauthlib depends on it.

(https://stackoverflow.com/questions/27497470/setuptools-finds-wrong-package-during-install)