Adding the composer.lock file and not ignoring it - needed to ensure that everyone always has the same version of everything