Updated composer install instructions

Avoids suggesting people install with `*` which is kinda dangerous, and still installs the latest version to their `composer.json`.