finish user layout
add SSL in production