Change UserFactory to create vouched users by default.

Since the most common test scenario requires vouched users to work, I
switched UserFactory to vouch users by default. Also added parameter
'vouched' to easily explicitly control the vouch status.