Fix versions in requirements.txt

[tonyyzy]

Following this recent cwltool issue common-workflow-language/cwltool#1159
I think we should specify the versions for each package in requirements.txt to ensure a stable environment, and only bump up the version after thorough testing :p