bump dependencies + switch autoloader to one provided by Composer