Octoprint: make sockjs-tornado and tornado_4_0_1 private

Tornado 4.0.1 is old and insecure, however, a package still depends on
it. We now move the package from the main Python package set into the
expression of the package that needs it.