[ExpressionLanguage] throw exception when parameters contain expressions
added ExpressionVoterTest
Removed duplicated condition

| Q             | A
| ------------- | ---
| Bug fix?      | no
| New feature?  | no
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | none
| License       | MIT
| Doc PR        | none

Removed unnecessary condition (looks like it's been copy/pasted from
line 84).
[Security] Add ExpressionLanguage to require-dev.
[FrameworkBundle] Fixed bug in XMLDescriptor
Bumping dependency to ProxyManager to allow testing against the new 0.5.x branch changes
fix deprecated usage and clarify constructor defaults for number formatter

by using the real default one can see the actual value without having to look into the implementation what NULL stands for