update composer dependencies, add config field to disable cert check