add composer.json, permissions is now optional & other fix