including secure passwords
finish user signup
force ssl
simplify the flash message code