updated composer depedencies

upgrade to phpseclib 3

This replaces the dependabot PR #4114 and adjusts the usage of the
library.