add composer.lock to push to heroku master