another composer update

We changed composer update to composer install because we are attempting to deploy the existing lockfile in test, not update dependencies and our lockfile.

We also add ' --prefer-source --no-interaction' to help get around composer's desire to check for newer versions and run smack into Githubs API rate limiting.