put composer.lock back into .gitignore