actually remove composer.lock