finish user signup
add ssl in production