add ssl in production
add sign-in and sign-out
finish sign in