Lock PhpSpec and Prophecy to the previous working version

Until the recent composer issues get resolved properly we need to pin MageSpec to a version of PhpSpec and Prophecy that we are sure it works.