finish user signup
use SSL and Unicorn in production