Update composer.json

Bumping versions to the 2.3 branch of Symfony, this avoids version clashes with newer project dependencies.