Composer Installer auto-version SHA

Problem: against best practice, the composer.phar installer download checksum was hard coded, but the latest version of the installer was downloaded, resulting in the checksum often not matching the package; build would ultimately fail. Solution: grab the latest checksum value along with the latest installer package.