rework composer manifest
fix composer
add composer lock for heroku