Fix security/* cross-dependencies

Author: nicolas-grekas

composer.json

@@ -30,7 +30,7 @@
         "symfony/dependency-injection": "~2.7|~3.0.0",
         "symfony/http-foundation": "~2.2|~3.0.0",
         "symfony/http-kernel": "~2.4|~3.0.0",
-        "symfony/security-csrf": "~2.4|~3.0.0",
+        "symfony/security-csrf": "^2.8.31|^3.3.13",
         "symfony/translation": "^2.0.5|~3.0.0"
     },
     "conflict": {