Looks like heroku's ssl doesn't pass through the to Express.