user signup, add ssl in production