Fix http-kernel dep in symfony/security

The current constraint will not match 2.3.x-dev and cause edge cases
where either:

* composer falls back to symfony/symfony because it cannot find a match
* composer installs 2.2 versions of http-kernel and http-foundation
merged branch igorw/security-constraint (PR #7866)

This PR was merged into the master branch.

Discussion
----------

Fix http-kernel dep in symfony/security

The current constraint will not match 2.3.x-dev and cause edge cases
where either:

* composer falls back to symfony/symfony because it cannot find a match
* composer installs 2.2 versions of http-kernel and http-foundation

Commits
-------

01016be Fix http-kernel dep in symfony/security
[SecurityBundle] fixed deps on the security component