Use composer installed PHPUnit vs. whatever is on travis.ci

Lock down to an older PHPUnit until we can get session code re-written.
The latest PHPUnit 3.7.x breaks session support which we need for the
time being.