finish user sign up
add force ssl in production