start setting up user creation
add strong parameter checking
handle invalid input in sign-up form
finish user signup (including some bried tests)
turn on ssl
fix a typo in test
use unicorn (and SSL, set up previously) in production