re-add composer.lock due to deployment issue with rocketeer