Properly pass extra arguments to composer

Composer would always be called without arguments, which would cause the
following error when running install:

    The lock file does not contain require-dev information, run install with
    the --no-dev option or run update to install those packages.