delete composer.lock because it slipped through