Make a basic user model including secure passwords
Finish user signup
Add SSL in production