Bump composer.lock and add composer to gitignore