Set SSL on for the entire app in production.
Add session based user state persistence.
Finish user edit, update, index, and destroy actions