even easier be secure on heroku/any production ENV.  Less setup for production, more setup for development.
readme typos
add asset sync after bundle install