Update composer.json
Merge pull request #166 from GrahamCampbell/composer

Better dependency versions constraints on `composer.json`.