Add SSL in production
finish ch 8.1, session created