Security Release

• Use a better XML parsing libraries that follows better security practises.
• Fix tox config for better local testing
• Generate a pinned version of deps using pip-compile to have deterministic builds always.
• Clean-up the requirements files.