introduce start/stop for socialapp
default to 5 rounds of bcrypt
added users testing again