never modify composer.lock, otherwise it will not deploy on openshift
updated with jsrouting bundle and fixed some deps