Refine spec
Make a basic User model (including secure password)
Finish user signup
Force SSL in production