update symfony dep to allow all remaining 2.x versions