do not pin explicit cookbook versions
Made only the php dependency explicit

The Opscode php cookbook has in the past introduced instability
so we prefer to keep this locked to an explicit version. It can be moved
forward when tested but not allowing librarian move it on without
testing.
Merge pull request #18 from inviqa/feature/correct-explicit-dependency-references

Feature/correct explicit dependency references