user model
user views
require SSL in production