Now trusting proxy because Heroku terminates SSL before it hits the app