bump composer.lock
add phpunit 3.7.* to composer require-dev