Locking codeception version in composer.json