requirements: pin lxml version for py27
requirements: pin lxml version for py27

lxml 4.4.0 breaks OrderedDict attributes in py27 so we pin to previous version
https://bugs.launchpad.net/lxml/+bug/1838252

fonttools/fonttools,googlefonts/fonttools