Use version specifiers for base requirements

Projects depending on the API client could use a slightly different versions of the common packages (e.g. requests==2.*).