urllib3 must be <1.25 for package attrs

#158

temporary change for testing

Protected by .htaccess, to avoid token exposure in case of server
misconfiguration (eg Python script not interpreted).