remove password from security config
add composer license
stick versions in
symfony 2.3