finish user signup
force ssl in prod