make a basic User model (incl. secure passwords)
finish user signup
add SSL in prod