basic user model with passwords
finish user signup
add SSL in production
bugfix?
bugfix?