hosting: remove app_user to reduce configuration complexity