UserManager: removed fix for PHP < 5.3.7, instead Sandbox requires PHP 5.3.7
added bin/create-user.php
Make the bcrypt call more expensive, let's stick to password_hash default of 10
UserManager uses Model\Passwords