update composer.phar

includes security fix

https://github.com/composer/composer/pull/2733