Adding composer.lock to fix versions for deploy
Updating .gitignore to allow composer.lock