create logstash user

UID 701 was choosen because:

- new user will get 9xx assigned in the upstream and collides
- it's unlikely that lmp (701 in /etc/services) will be used