Add app-manager user and password

[endlessm/eos-shell#2794]
Merge pull request #1 from endlessm/shell/2794

Add app-manager user and password
Add separate app-manager group

Although there are probably not any issues in practice with having
app-manager part of nogroup, it's cleaner to have the app-manager user
totally isolated so that the files it creates in /var/endless don't
somehow become writable by unintended users.

[endlessm/eos-shell#2915]
Merge pull request #2 from endlessm/shell/2915

Add separate app-manager group