ignore composer.lock in applications (yii2-dev only)