heroku settings added (DB, https, allowed hosts