fixed vagrant install, tightened composer dependencies where possible