Use a specific version of phpunit-code-coverage

phpunit code coverage has a 2.x branch now with a different API
update composer.lock