finish user sign up
force SSL in production