Relax version constraint for zend-session in composer.json (php 7.2)

[alexdenvir]

composer.json is currently locking zend-session to 2.7.*

zend-session releases from 2.8 have been adding support for php 7.2

I recommend changing this constraint to ^2.7

[kstich]

Resolved via #52