hosting: more app_user cleanup