adding composer.lock for heroku