Better PHPUnit version constraint

Since global composer installs are weird, we should probably open the PHPUnit version constraint up a bit.

/cc @GrahamCampbell