Require ext-mbstring in composer.json

It's used by `Canonicalizer`, and the extension is not enabled by default in PHP, so the dependency should be declared (see https://coderwall.com/p/xr9xfg).