move friendsofsymfony/rest-bundle from require-dev to require because it is needed at runtime