Update composer.json

Let's use some better dev-dependencies.
Sure. Since the latest release is 3.0.x, i don't think there will be any breaking changes on 2.x. I don't use behat much, so I'm not too familiar with their release cycle, and how they go about breaking changes. I guess we can wait for @lucadegasperi to confirm if this is ok. :)