disallow access to composer files
Merge pull request #2308 from huglester/2.3/develop

disallow access to composer files