updated composer

composer now loads dev dependencies ("require-dev") by default, so added '--no-dev' option