adding composer.lock