Adds composer.lock for dependancies tracking