remove composer.lock from versioning
UPGRADE to sf 2.1.x