Replace Devise authentication with my own.
Move non-shared users and records partials out of shared.
Use SSL in production.