Tight versioning of requirements file

I have a `requirements.txt` file now but didn't carefully check the lower bound for packages. This would be tedious, but actually go through the packages and see what version breaks the dependencies so that all packages have a >= with them.