Add minimal composer.json

This allows developers to pull in phpFormProtect via composer. If you also start to tag commits we could pull in particular versions as opposed to pulling in latest commits from master whenever we update our dependencies.