finish use signup
add ssl in production
ch 7 exercise