heroku does "Piggyback" SSL by default, therefore, don't need
to turn off SSL (/admin still works fine).