add FOSUserBundle to composer.json
remove phpass from default install.

It is currently only used for phpBB3 plugin. Future bcrypt usage
will come from symfony native password encoders