I would move the requirements.txt and pip install to after the user creation seeing as you'll invalidate that cache if your requirements change.

Best part is that was brought up as an issue in the article only to do the same thing in an example