Bring back the composer.lock file so we can lock the app dependencies in known working state