Fix #5536. Bump vendored requirementslib to 2.2.3 which includes the actual fix. Also, add a test case for this in pipenv.