Redirect http requests to https

Add connect-redirection dependency
Use x-forward-proto instead of request.secure b/c on heroku request.secure is always false