MAGETWO-50611: [Github][Security] WebAPIs allow anonymous access

Author: Yaroslav Voronoy

composer.json

@@ -69,7 +69,7 @@
     "require-dev": {
         "phpunit/phpunit": "4.1.0",
         "squizlabs/php_codesniffer": "1.5.3",
-        "phpmd/phpmd": "@stable",
+        "phpmd/phpmd": "2.3.*",
         "pdepend/pdepend": "2.2.2",
         "sjparkinson/static-review": "~4.1",
         "fabpot/php-cs-fixer": "~1.2",