composer.lock should not be ignored

this should replace #149