implement signup
use ssl in production