Update composer.json for Symfony 2.3

It's safe to use 2.1+, since Symfony 2.3 is going to be a LTS.