add --no-dev flag to 'composer update' command