finish user signup
SSL in production
without SSL
after removal