switch insecure-routes-bundle to origin repository
bump composer.lock