at section 6.2
Make a user model with secure passwords
Finish user signup
Add SSL in production
Finish sign-in-out