asset handling
have heroku compile assets upon deployment
add heroku post_compile script
force ssl for reals
max-age for static assets