Make a basic User model with secure passwords
Finish user signup
Add SSL in production
Finish Session tracking