make a basic user model including secure passwords
finish signup
add SSL in production