added composer.lock to .gitignore
fixed lightsaml dependency version