use SSL in production
update user signed up tests
add sessions, update landing, allow for log in
update header based on if signed in, allow for signing out