Added composer.lock to pin down dependencies.