Rack middleware to prevent loading from `*.heroku.com` / `*.herokuapp.com` addresses