composer lock
up
security tweaks (knp menu and @security)