Make a basic user model, including secure passwords
Finish user signup
Add SSL for production