heroku fix
secret
sec
turn off rack ssl
cleanup
more config