add composer.lock to .gitignore
add composer.json