can't force SSL on heroku...

... It's likely that heroku locally proxies to the app over http, even
though the external request coming to heroku is over https.

For now, give up on forcing https. We can still use https.