Composer is finicky. First, the website should be set to www:www. Then the running user should set his home directory .composer directory to be group www, and change the cache subdirectory to be group- readable. Then run composer commands as sudo -u www.
Composer may hit a memory limit when running. If so, execute the command as "php -d memory_limit=-1 /usr/local/bin/composer ..."