Fixed all the securoty issues and it works on heroku