don't use oauth-dropins 2.0 until we're ready for it

...since it drops googleplus.

.circleci/config.yml

@@ -24,10 +24,11 @@ jobs:
           name: Base dependencies
           command: |
             apt-get install -y python3 google-cloud-sdk-app-engine-python-extras
-            # use oauth-dropins master at head. (see pip install -e below.)
+            # TEMPORARILY use oauth-dropins master at 1.14. (see pip install -e below.)
+            # TODO: switch back to head once granary 2.0 ships.
             cd /tmp
             git clone https://github.com/snarfed/oauth-dropins.git
-            cd oauth-dropins; git submodule sync; git submodule update --init
+            cd oauth-dropins; git checkout v1.14; git submodule sync; git submodule update --init
 
       - run:
           name: Python 3 dependencies

requirements.txt

@@ -7,7 +7,7 @@ jinja2
 mf2py>=1.1.2
 mf2util>=0.5.0
 mox3>=0.24.0
-oauth-dropins>=1.14
+oauth-dropins>=1.14,<2.0
 requests>=2.10.0
 requests-toolbelt>=0.6.2
 urllib3>=1.14

setup.py

@@ -2,7 +2,7 @@
 
 Docs:
 https://packaging.python.org/en/latest/distributing.html
-http://pythonhosted.org/setuptools/setuptools.html
+https://setuptools.readthedocs.io/
 
 Based on https://github.com/pypa/sampleproject/blob/master/setup.py
 """
@@ -51,7 +51,7 @@ def __init__(self, *args, **kwargs):
           'jinja2',
           'mf2py>=1.1.2',
           'mf2util>=0.5.0',
-          'oauth-dropins>=1.14',
+          'oauth-dropins>=1.14,<2.0',
           'requests-toolbelt>=0.6.2',
           'requests>=2.10.0',
           'urllib3>=1.14',