add vendor to gitignore and add composer.lock