update oauth2server composer version