made composer.lock up-to-date with composer.json again

composer.lock was out-of-date with composer.json