upstream fixes, simplified controller resolving

fixed `composer deps`

now the controllers stay untouched, it means normal symfony request and response.
the converting is done in the application itself.

although the react request/response are available as request attributes.