added user auth, signup + force ssl