composer.lock updated with composer