update composer.json with corrected wpsu refs. update composer.lock with working version. remove the legacy vendor package pmpsdk.phar.