Explain the possible IP precautions

@rafaelfranca, here you go. Just explain what you can do to stay safe (or at least safer) on Heroku without SSL.