Update composer.json

Target specific releases of the oauth lib to prevent breaking changes in `dev-master` from breaking this lib.