password protect for production
add pg for heroku
value letters