finish user signup, add SSL in production