finish user signup
SSL in production