made composer.lock up-to-date with composer.json

composer.lock was out-of-date with composer.json