added composer.lock (composer install on server)