this is run as ec2-user, so a sudo is needed to mkdir in ~app