make a basic user model (with secure password)
Finish user signup
add SSl in production
Finish login/out