Add SSL in production
Hack error message, turn Password digest to Password.
Add a bunch of shit in don't understandgit add . Remember Token & Cookies.
Add header log-in drop down box.