Update composer.json

we mustn't always pull latest version.
so I propose to use ~5.3.1 or ~5.3 and switch to next release only when it'll be thoroughly tested