finish user signup
force ssl in production
finish sign in/out