finish user signup
force ssl