took composer.lock out of .gitignore