force https when deployed to heroku BEFORE LOGIN
automatically redirect to index.html when accessing /
(cherry picked from commit f7a7b2c)