Versionize composer.lock

To ensure, that always the exactly same versions of the dependencies were installed,
the `composer.lock` should be versionized too. From time to time

    php composer.phar update

should update the lock-file