update composer.json to fix phpcas dep