Australia's online safety regulator has put social media companies on notice, requiring them to explain what they are doing to to protect users.