Update Composer

Update composer to use the ~ ("within current release") selector to allow this to work on 4.2 sites.
Update Composer to allow for 3.3 *and up* so oauth1's 3.3.* dependency doesn't conflict.