Updated composer install instructions

Avoids suggesting people install with `*` which is kinda dangerous, and still installs the latest version to their `composer.json`.
yes, manual put to the composer.json is kind of for pro, when you control what are you do as well understand what is happen, instead of just user `composer require` for lazy or just as fast install