Update composer.json

excluded DBAL v2.5.0 due to this bug:
http://www.doctrine-project.org/jira/browse/DBAL-1057

the bug causes massiv problems in the sf2 context when the database connection cannot be established. almost any command even an `assetic:dump` may trigger a db-connect which makes remote deployments impossible.