add config and moved staticfiles section

Fixes:
1. When trying to run collect static on heroku production, it didn't work due to missing a location for staticfiles_dirs.
2. Also added configurations to the SSL settings since not everyone will be able to run SSL in prod testing.  It would be nice to allow override with env variables. 

@pydanny can you just check this over when things calm down (no hurry!) and make sure you want them, I'm not a heroku user til this week. ;)