Remove ignore of composer.lock

#52 To support locking a dev environment to specific versions of vendor libraries, the composer.lock should be in source control.

https://getcomposer.org/doc/01-basic-usage.md#composer-lock-the-lock-file
"Commit your application's composer.lock (along with composer.json) into version control."