add a composer install step, and update deps