because migration is now handled in the CLI, csrf checks can be enabled
bower needed to resolve angular 1.0.8
updated composer