update url for vvv
ignore composer.lock