before chap 7
finish user signup
add ssl in production