EZP-22139: require nelmio/cors-bundle @dev

So that QA can test the merged version before it gets tagged.
Merge pull request #93 from ezsystems/EZP-22139-nelmio_cors_bundle_branch

EZP-22139: require nelmio/cors-bundle @dev