HEROKU_CLIENT_URL now runs over HTTPS