updating composer + gitignore to use lock files.