finish user signup
use SSL and unicorn in production