Make a basic User Model (including secure passwords)
Add SSL in production