user model
login finished
SSL in production