add signup capability
use ssl in production