composer.lock in gitignore