update gems for Heroku
Use SSL in production