hosting: force shell to bash for _app user