add .gitignore, composer.lock