added SECURE_PROXY_SSL_HEADER to heroku settings