added no-dev on composer update