make a basic user model (+secure passwords)
finish user sign up
add SSL in production