remove composer.lock after create-project
validate replacing composer.json