Add composer.lock file to fix versions