basic user model including safe passwords
user signup finished
add SSL in production
finish sign in