download composer using surl