gitignoring composer.lock