Update composer.json

blocked symfony/filesystem to 2.3.* release