ignore vendor directory, use composer to install deps
dependencies added to composer.json