created user entity
moved profile page to app level
moved whole app to https level for form security