[composer] use composer install instead of composer update