Updating composer.lock, so we're sure we've got the updated PHPass.