url options and domain setting
updating bcrypt and production to use env vars
make production server static assets