Update composer.json

I've updated the Symfony deps. It should be safe
and would avoid to create another branch for Symfony 2.3.