Make a basic User model(including secure password).
finish user signup.
add ssl in production.