updates for heroku security
yay heroku