composer.json : set symfony/security to 2.3.3 (conflict with http-kernel)