add composer.lock to .gitignore