Add HWIOauthBundle to CoreBundle deps

Sorry guys I did it a bit too fast yesterday.

@cordoval I've put `0.3.*` just to be consistent with the main app `composer.json`. If we want to use a better version pattern it's a wider change.