dealing with passwords chapter 6
finish user sign up
add ssl in production