Force ssl

This PR adds the `rack-ssl` middleware gem to force all requests to their HTTPS equivalents. This happens in all environments _except_ development (using `RACK_ENV`, set to "production" by default on Heroku; so HTTPS is auto-enabled upon deploy).