finish c7: user signup
add SSL in production