Update composer.json

Depend on a stable version of htmlpurifier