updated deps, fixed composer and Yii autoloading