Adding composer, whitelisting phar loading in cli