make basic User w/ secure passwords
Add SSL in production