make a basic user model including secure passwords
finish user signup
add ssl in production