fix setup script again, remove composer.lock from gitignore