fix composer.json allow sf 2.3