Deny non SSL from heroku