add user validations and password stuff to user
can create user now
add routes and link to header
error messages handled
force ssl