xhprof removed their composer.json file, adding it to our composer.json file so we can still use composer to manage xhprof. Added an extra script to make sure the update is clean for git users.