Added composer.phar & composer.lock to lock package versions