Pip install cryptography fails on py36

[webknjaz]

Tox creates separate virtualenvs, you probably want newer pip there. So upgrade virtualenv because it has a specific version of pip bundled.