1. finish "user signup"
2. enforce ssl in production config.
update the form style to new bootstrap classes