Removed composer dependency on CMS, workaround for composer/installers

The installer dependency gets included too late for 2.4,
so framework ends up in the wrong path. That's a bug with composer,
see See https://github.com/composer/composer/issues/1147
Until its fixed, we remove the explicit dependency which seems
to trigger this path in the dependency resolver (works for 3.x)