make a basic user model, including secure password
finish user signup
add ssl in production
finishing sign in