Do not version composer dependencies

[jesconstantine]

Let's make Mayflower more consistent with our other Mass.gov projects by not versioning vendor/. We'll want to check circle, phing, and bash scripts to see if / when we should be running composer install prior to builds.

This will ease developer / reviewer processes by removing diff noise and also make dependency updates more efficient, as mentioned in #519