make a basic user model (not including secure passwords)
finis user signup
Add SSL in production
created new session