nginx: don't proxy to Heroku over HTTPS

This breaks the Referer header and several Django redirects.