update composer to use no development version of eher/oauth