Lock in Symfony component versions for stability

Was seeing some confusion from Composer as to what `2.*` meant in a project.