add composer.lock to gitignore