git ignore composer.lock